ltm global-settings connection¶

ltm global-settings connection(1) BIG-IP TMSH Manual ltm global-settings connection(1)

NAME
connection - Configures the global settings that pertain to connections for the BIG-IP(r) and VIPRION(r) local traffic
management systems.

MODULE
ltm global-settings

SYNTAX
Configure the connection component within the ltm global-settings module using the syntax shown in the following sections.

MODIFY
modify connection
options:
adaptive-reaper-hiwater [integer]
adaptive-reaper-lowater [integer]
auto-last-hop [disabled | enabled]
default-vs-syn-challenge-threshold [infinite | integer]
global-flow-eviction-policy [name]
global-syn-challenge-threshold [infinite | integer]
syncookies-threshold [integer]
vlan-keyed-conn [disabled | enabled]
vlan-syn-cookie [disabled | enabled]

DISPLAY
list connection
list connection [option name]
show running-config connection
show running-config connection [option name]
options:
all-properties
non-default-properties
one-line

DESCRIPTION
You can use the connection component to modify how the system processes connections.

EXAMPLES
modify connection auto-last-hop disabled
Specifies that the system does not automatically map the last hop for pools.

list connection
Displays the global settings for how the system processes connections.

OPTIONS
adaptive-reaper-hiwater
*IMPORTANT* This command has been deprecated (as of 11.6.0). Please use ltm eviction-policy instead. Specifies, in a
percentage, the memory usage at which the system stops establishing new connections. Once the system meets the reaper
high-water mark, the system does not establish new connections until the memory usage drops below the reaper low-water
mark. The adaptive reaper settings help mitigate the effects of a denial-of-service attack.

The available range is 85 - 100. The default value is 95. To disable the adaptive reaper, set the high-water mark to
100.

adaptive-reaper-lowater
*IMPORTANT* This command has been deprecated (as of 11.6.0). Please use ltm eviction-policy instead. Specifies, in
percent, the memory usage at which the system silently purges stale connections, without sending reset packets (RST)
to the client. If the memory usage remains above the low-water mark after the purge, then the system starts purging
established connections closest to their service timeout.

The available range is 70 - 100. The default value is 85. To disable the adaptive reaper, set the low-water mark to
100.

auto-last-hop
Specifies that the system automatically maps the last hop for pools. The default value is enabled.

default-vs-syn-challenge-threshold
Specifies the default value of per-virtual server SYN Cookie activation threshold per chassis. The default value is
infinite. The valid range is 128 - 1024K or infinite (encoded as 0).

global-flow-eviction-policy
Specifies the flow eviction policy to use when approaching memory usage limits. The settings in the policy determine
the adaptive reaper high and low water marks, and help determine which client connections to terminate when memory
limits have exceeded the "low-water" threshold in the eviction policy. The settings help mitigate the effects of a
denial-of-service attack.

global-syn-challenge-threshold
Specifies the default value of the global SYN Cookie activation threshold per TMM. The default value is 64K. The valid
range is 2048 - 4096K or infinite (encoded as 0).

syncookies-threshold
This option is deprecated in version 13.0.0 and is replaced by default-vs-syn-challenge-threshold. Specifies the
number of new or untrusted TCP connections that can be established before the system activates the SYN Cookies
authentication method for subsequent TCP connections. The default value is 16384.

vlan-keyed-conn
Enables or disables VLAN-keyed connections. You use VLAN-keyed connections when traffic for the same connection must
pass through the system several times, on multiple pairs of VLANs (or in different VLAN groups). The default value is
enabled.

vlan-syn-cookie
Enables or disables the hardware per-VLAN SYN cookie protection on platforms with supported firmware. The default
value is enabled.

SEE ALSO
list, ltm node, modify, show, tmsh

COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or mechanical, including
photocopying, recording, or information storage and retrieval systems, for any purpose other than the purchaser's personal
use, without the express written permission of F5 Networks, Inc.

BIG-IP 2016-09-06 ltm global-settings connection(1)